Hello Anthony, On Monday, October 18, 2004 at 6:22:50 AM Anthony [AGA] wrote:
AGA> 1. There's a macro and menu option for "Use OpenPGP," but exactly what AGA> does this do? It enables or disables PGP-usage. There is a different method for signing and/or encrypting messages: S/MIME. If both were activated the message would be double signed/encrypted, this is most the times *not* intended. Therefore you have the possibility to selectively activate and/or deactivate any of these two security mechanisms. Hereby activating one does NOT imply deactivating the other. And in the end you only have to sign/encrypt the message, without further carrying about which method will be used (therefore only one macro per command, %SignComplete & %EncryptComplete, has to exist). AGA> 2. What's the best way to recognize PGP-signed messages in incoming mail AGA> with filters? The best? Guess you'll have to figure yourself what is best *for you*. One possibility could be to filter for "Content-Type: multipart/signed" in message source. One could extend search pattern to include 'protocol="application/pgp-signature"' too, but I'm to lazy to search my database if there are other protocol strings that indicate PGP signature. Of course this only captures PGP/MIME signed messages, for "inline" signed messages you'll have to add the appropriate signal string yourself :-) AGA> since I can generally assume that any message with a PGP AGA> signature is not spam Wrong assumption. Since spammers know PGP signed messages get lesser scores in anti spam software they tend to pretend sending PGP-signed messages (usually inline signed). Of course the signature *IS* invalid, it's just they fake the general syntax, so somebody checking only *if* a signature is present, but not it the signature is valid, is satisfied. -- Regards Peter Palmreuther (The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2) It was a book to kill time for those who liked it better dead. ________________________________________________ Current version is 3.0.1.33 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
